From: Alan Hicks (alanlizella.net)
Date: Sun Aug 08 2004 - 15:36:01 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Aug 8, 2004, at 6:00 AM, focus-linux-digest-helpsecurityfocus.com
wrote:
> If you have a policy in the company that the users should not be able
> to
> install unauthorized software on their machine why not just not allow
> admin access on the individual workstation. This should alleviate the
> problem whether or not the workstations in your company are linux or
> windows.

It may work in practice against and clueless user, but against anyone
with a modicum of Clue this simply won't work for the vast majority of
software. Unless the software requires admin privileges to run, it can
still be installed into a directory the user has write access to by the
user. That user can then run that program and as long as it doesn't
require admin privileges it should function the same. Obviously if the
program has to run as root or has to write to the windows registry it
won't work, but most open source software isn't restricted in either of
these ways.

- --

It is better to hear the rebuke of the wise,
Than for a man to hear the song of fools.
Ecclesiastes 7:5
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFBFo6xlKR45I6cfKARAm2SAJ9ZceYShcqI3gSFaTYhoB2V2bEX2ACgpc/v
TPT9i2qvnyaLzUEZfDexdPo=
=kyuQ
-----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]